lastlight 0.15.0 → 0.16.1

package/dist/cron/fanout.js

@@ -1,55 +0,0 @@
-/**
- * Cron fan-out: when a cron job context contains a `repos` array, dispatch
- * one workflow run per repo instead of passing the array through to a single
- * dispatch that expects `context.repo` (singular).
- *
- * Each per-repo run gets its own workflow_runs row, taskId, sandbox, and
- * trigger id, so failures are isolated and the existing per-run resume
- * machinery works unchanged.
- *
- * Concurrency is bounded so 100 repo scans don't spin 100 concurrent
- * sandboxes — default is 3, tunable per call.
- */
-/**
- * Dispatch a cron-scheduled workflow, fanning out over `context.repos` when
- * present. When absent, behaves like a single dispatch. Always stamps
- * `_triggerType: "cron"` on the outgoing context.
- */
-export async function dispatchCronWorkflow(workflowName, context, dispatch, options = {}) {
-    const base = { ...context, _triggerType: "cron" };
-    const rawRepos = base.repos;
-    if (!Array.isArray(rawRepos)) {
-        const result = await runOne(dispatch, workflowName, base);
-        return { dispatched: 1, failures: result ? 0 : 1 };
-    }
-    const { repos: _drop, ...rest } = base;
-    const repos = rawRepos.filter((r) => typeof r === "string" && r.length > 0);
-    if (repos.length === 0) {
-        return { dispatched: 0, failures: 0 };
-    }
-    const concurrency = Math.max(1, options.concurrency ?? 3);
-    let dispatched = 0;
-    let failures = 0;
-    for (let i = 0; i < repos.length; i += concurrency) {
-        const batch = repos.slice(i, i + concurrency);
-        const results = await Promise.allSettled(batch.map((repo) => runOne(dispatch, workflowName, { ...rest, repo })));
-        for (const r of results) {
-            dispatched++;
-            const ok = r.status === "fulfilled" && r.value === true;
-            if (!ok)
-                failures++;
-        }
-    }
-    return { dispatched, failures };
-}
-async function runOne(dispatch, workflowName, context) {
-    try {
-        const result = await dispatch(workflowName, context);
-        return !!(result.success || result.paused);
-    }
-    catch (err) {
-        console.error(`[cron-fanout] ${workflowName} dispatch threw for ${String(context.repo ?? "<no repo>")}:`, err);
-        return false;
-    }
-}
-//# sourceMappingURL=fanout.js.map

package/dist/cron/fanout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fanout.js","sourceRoot":"","sources":["../../src/cron/fanout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmBH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,OAAgC,EAChC,QAAwB,EACxB,UAAyB,EAAE;IAE3B,MAAM,IAAI,GAA4B,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;IAE5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,KAAK,GAAI,QAAsB,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CACvE,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;YACxD,IAAI,CAAC,EAAE;gBAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,QAAwB,EACxB,YAAoB,EACpB,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,iBAAiB,YAAY,uBAAuB,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,EAC1F,GAAG,CACJ,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cron/jobs.d.ts

@@ -1,18 +0,0 @@
-import type { CronJob } from "./scheduler.js";
-import type { StateDb } from "../state/db.js";
-/**
- * Get cron jobs based on configuration.
- *
- * Cron job definitions are loaded from workflows/cron-*.yaml files. Each
- * cron YAML references an agent workflow by name (workflows/<name>.yaml)
- * which is invoked on each tick. When webhooks are enabled
- * (WEBHOOK_SECRET is set), jobs with `condition.unless: webhooksEnabled`
- * are filtered out — those are handled in real-time via webhook events.
- *
- * When `db` is supplied, cron_overrides rows applied: disabled jobs are
- * dropped and schedule overrides replace the YAML schedule.
- */
-export declare function getJobs(opts?: {
-    webhooksEnabled?: boolean;
-    db?: StateDb;
-}): CronJob[];

package/dist/cron/jobs.js

@@ -1,37 +0,0 @@
-import { getManagedRepos } from "../managed-repos.js";
-import { getCronWorkflows } from "../workflows/loader.js";
-/**
- * Get cron jobs based on configuration.
- *
- * Cron job definitions are loaded from workflows/cron-*.yaml files. Each
- * cron YAML references an agent workflow by name (workflows/<name>.yaml)
- * which is invoked on each tick. When webhooks are enabled
- * (WEBHOOK_SECRET is set), jobs with `condition.unless: webhooksEnabled`
- * are filtered out — those are handled in real-time via webhook events.
- *
- * When `db` is supplied, cron_overrides rows applied: disabled jobs are
- * dropped and schedule overrides replace the YAML schedule.
- */
-export function getJobs(opts) {
-    const jobs = [];
-    let cronDefs = getCronWorkflows();
-    // Apply conditions
-    if (opts?.webhooksEnabled) {
-        cronDefs = cronDefs.filter((def) => def.condition?.unless !== "webhooksEnabled");
-    }
-    const overrides = opts?.db?.getAllCronOverrides() ?? new Map();
-    for (const def of cronDefs) {
-        const override = overrides.get(def.name);
-        if (override && !override.enabled)
-            continue;
-        jobs.push({
-            name: def.name,
-            schedule: override?.schedule || def.schedule,
-            workflow: def.workflow,
-            // Merge managed repos into the context the workflow receives
-            context: { repos: getManagedRepos(), ...def.context },
-        });
-    }
-    return jobs;
-}
-//# sourceMappingURL=jobs.js.map

package/dist/cron/jobs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/cron/jobs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,OAAO,CAAC,IAAkD;IACxE,MAAM,IAAI,GAAc,EAAE,CAAC;IAE3B,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IAElC,mBAAmB;IACnB,IAAI,IAAI,EAAE,eAAe,EAAE,CAAC;QAC1B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC;IAE/D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAC5C,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAC5C,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,6DAA6D;YAC7D,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cron/scheduler.d.ts

@@ -1,45 +0,0 @@
-import type { StateDb } from "../state/db.js";
-export interface CronJob {
-    name: string;
-    schedule: string;
-    /** Name of an agent workflow (workflows/<name>.yaml) to invoke on each tick */
-    workflow: string;
-    context: Record<string, unknown>;
-    /** Maximum consecutive failures before alerting */
-    maxFailures?: number;
-}
-/** A lightweight direct job — runs a function, not a workflow */
-export interface DirectCronJob {
-    name: string;
-    schedule: string;
-    handler: () => Promise<void>;
-}
-export type WorkflowRunner = (workflow: string, context: Record<string, unknown>) => Promise<void>;
-/**
- * Cron scheduler with overlap protection and failure tracking.
- * Each job runs a workflow via the agent runner, tracked in SQLite.
- */
-export declare class CronScheduler {
-    private jobs;
-    private running;
-    private db;
-    private runner;
-    constructor(db: StateDb, runner: WorkflowRunner);
-    register(job: CronJob): void;
-    /** Register a lightweight direct handler (no skill/sandbox overhead) */
-    registerDirect(job: DirectCronJob): void;
-    /** Whether a cron with this name is currently registered. */
-    has(name: string): boolean;
-    /** Stop and remove a single cron. No-op if not registered. */
-    unregister(name: string): void;
-    /** Replace an existing cron with a new schedule/context. Equivalent to unregister + register. */
-    update(job: CronJob): void;
-    /** Snapshot of registered jobs with the croner-computed next-run timestamp. */
-    list(): Array<{
-        name: string;
-        schedule: string;
-        nextRun: Date | null;
-    }>;
-    /** Stop all cron jobs */
-    stopAll(): void;
-}

package/dist/cron/scheduler.js

@@ -1,105 +0,0 @@
-import { Cron } from "croner";
-/**
- * Cron scheduler with overlap protection and failure tracking.
- * Each job runs a workflow via the agent runner, tracked in SQLite.
- */
-export class CronScheduler {
-    jobs = new Map();
-    running = new Set();
-    db;
-    runner;
-    constructor(db, runner) {
-        this.db = db;
-        this.runner = runner;
-    }
-    register(job) {
-        if (this.jobs.has(job.name)) {
-            throw new Error(`Cron job "${job.name}" already registered`);
-        }
-        const cronJob = new Cron(job.schedule, async () => {
-            // Overlap protection — skip if still running
-            if (this.running.has(job.name)) {
-                console.log(`[cron] Skipping ${job.name} — still running from previous tick`);
-                return;
-            }
-            this.running.add(job.name);
-            console.log(`[cron] Running: ${job.name}`);
-            try {
-                await this.runner(job.workflow, job.context);
-            }
-            catch (err) {
-                console.error(`[cron] ${job.name} failed:`, err.message);
-                // Check consecutive failures (tracked under the workflow name)
-                const failures = this.db.executions.consecutiveFailures(job.workflow);
-                const max = job.maxFailures || 3;
-                if (failures >= max) {
-                    console.error(`[cron] ALERT: ${job.name} has failed ${failures} times consecutively`);
-                    // TODO: send alert (Slack webhook, email, etc.)
-                }
-            }
-            finally {
-                this.running.delete(job.name);
-            }
-        });
-        this.jobs.set(job.name, cronJob);
-        console.log(`[cron] Registered: ${job.name} (${job.schedule})`);
-    }
-    /** Register a lightweight direct handler (no skill/sandbox overhead) */
-    registerDirect(job) {
-        if (this.jobs.has(job.name)) {
-            throw new Error(`Cron job "${job.name}" already registered`);
-        }
-        const cronJob = new Cron(job.schedule, async () => {
-            if (this.running.has(job.name)) {
-                return;
-            }
-            this.running.add(job.name);
-            try {
-                await job.handler();
-            }
-            catch (err) {
-                console.error(`[cron] ${job.name} failed:`, err.message);
-            }
-            finally {
-                this.running.delete(job.name);
-            }
-        });
-        this.jobs.set(job.name, cronJob);
-        console.log(`[cron] Registered: ${job.name} (${job.schedule})`);
-    }
-    /** Whether a cron with this name is currently registered. */
-    has(name) {
-        return this.jobs.has(name);
-    }
-    /** Stop and remove a single cron. No-op if not registered. */
-    unregister(name) {
-        const job = this.jobs.get(name);
-        if (!job)
-            return;
-        job.stop();
-        this.jobs.delete(name);
-        console.log(`[cron] Stopped: ${name}`);
-    }
-    /** Replace an existing cron with a new schedule/context. Equivalent to unregister + register. */
-    update(job) {
-        this.unregister(job.name);
-        this.register(job);
-    }
-    /** Snapshot of registered jobs with the croner-computed next-run timestamp. */
-    list() {
-        return Array.from(this.jobs.entries()).map(([name, cronJob]) => ({
-            name,
-            schedule: cronJob.getPattern() ?? "",
-            nextRun: cronJob.nextRun(),
-        }));
-    }
-    /** Stop all cron jobs */
-    stopAll() {
-        for (const [name, job] of this.jobs) {
-            job.stop();
-            console.log(`[cron] Stopped: ${name}`);
-        }
-        this.jobs.clear();
-    }
-}
-//# sourceMappingURL=scheduler.js.map

package/dist/cron/scheduler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/cron/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAsB9B;;;GAGG;AACH,MAAM,OAAO,aAAa;IAChB,IAAI,GAAsB,IAAI,GAAG,EAAE,CAAC;IACpC,OAAO,GAAgB,IAAI,GAAG,EAAE,CAAC;IACjC,EAAE,CAAU;IACZ,MAAM,CAAiB;IAE/B,YAAY,EAAW,EAAE,MAAsB;QAC7C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,GAAY;QACnB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,IAAI,sBAAsB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAChD,6CAA6C;YAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,qCAAqC,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAE3C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAEzD,+DAA+D;gBAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACtE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;gBACjC,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACpB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,IAAI,eAAe,QAAQ,sBAAsB,CAAC,CAAC;oBACtF,gDAAgD;gBAClD,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,wEAAwE;IACxE,cAAc,CAAC,GAAkB;QAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,IAAI,sBAAsB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAChD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3D,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,6DAA6D;IAC7D,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,iGAAiG;IACjG,MAAM,CAAC,GAAY;QACjB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,+EAA+E;IAC/E,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,yBAAyB;IACzB,OAAO;QACL,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;CACF"}

package/dist/engine/agent-executor.d.ts

@@ -1,34 +0,0 @@
-import { type ExecutorConfig, type ExecutionResult, type GitSandboxAccess } from "./github/profiles.js";
-import type { SandboxFactory } from "../sandbox/sandbox.js";
-import { type CommandSpec } from "./executors/orchestrator.js";
-export { RunResultAccumulator, stageSkillBundle, excludeFromGit, detectAccountError } from "./executors/shared.js";
-export type { CommandSpec } from "./executors/orchestrator.js";
-export declare function executeAgent(prompt: string, config: ExecutorConfig, opts?: {
-    taskId?: string;
-    /**
-     * Fired as soon as the run gets a session id. Used to persist the id
-     * onto the in-flight executions row so the dashboard can deep-link
-     * the running phase to its live JSONL.
-     */
-    onSessionId?: (sessionId: string) => void;
-    githubAccess?: GitSandboxAccess;
-    /** Test seam — substitute a FakeSandbox. Defaults to the real factory. */
-    sandboxFactory?: SandboxFactory;
-}): Promise<ExecutionResult>;
-export declare function executeCommand(spec: CommandSpec, config: ExecutorConfig, opts?: {
-    taskId?: string;
-    githubAccess?: GitSandboxAccess;
-    /** Per-step timeout in seconds. */
-    timeoutSeconds?: number;
-    /** Extra env forwarded into the command (e.g. upstream phase outputs). */
-    sandboxEnv?: Record<string, string>;
-    onSessionId?: (sessionId: string) => void;
-    /**
-     * Mirror the command output to a session jsonl (visible in the dashboard +
-     * CLI). Default true. Set false for internal checks like `until_bash` that
-     * shouldn't create a user-facing session log.
-     */
-    writeSession?: boolean;
-    /** Test seam — substitute a FakeSandbox. Defaults to the real factory. */
-    sandboxFactory?: SandboxFactory;
-}): Promise<ExecutionResult>;

package/dist/engine/agent-executor.js

@@ -1,246 +0,0 @@
-import { resolve } from "path";
-import { randomUUID } from "crypto";
-import { refreshGitAuth } from "./github/git-auth.js";
-import { GITHUB_PERMISSION_PROFILES, } from "./github/profiles.js";
-import { getDockerSandboxOtelEnv, getOtelEnvForSandbox, safeSpanAttributes, withSpan } from "../telemetry/index.js";
-import { DEFAULT_MODEL } from "./executors/shared.js";
-import { PROVIDER_ENV_KEYS } from "../providers.js";
-import { oauthEnvVarForProvider, oauthProviderIdForModel, resolveOAuthApiKey } from "./oauth.js";
-import { runSandboxedAgent, runSandboxedCommand, } from "./executors/orchestrator.js";
-// Re-exported for back-compat with existing importers (tests, dashboards,
-// workflow phase executor).
-export { RunResultAccumulator, stageSkillBundle, excludeFromGit, detectAccountError } from "./executors/shared.js";
-/**
- * Shared run preparation for {@link executeAgent} and {@link executeCommand}:
- * resolve the taskId / state dir / backend, mint the scoped GitHub token,
- * assemble the sandbox env (git token, provider keys, OTEL), and compute the
- * pre-populate descriptor. Both the agent and the deterministic command paths
- * run in the same sandbox/workspace with the same git access, so they share
- * this setup verbatim.
- */
-async function prepareRun(config, opts) {
-    const taskId = opts?.taskId || `task-${randomUUID().slice(0, 8)}`;
-    const stateDir = config.stateDir || resolve("data");
-    const backend = config.sandbox ?? "gondolin";
-    // Mint a scoped GitHub App token. Same flow as the legacy executor —
-    // defense in depth so a downstream tool gating regression can't burn
-    // more access than the profile allowed.
-    //
-    // GITHUB_APP_* env vars are forwarded to agentic-pi *only* when the access
-    // profile opts into App PEM access via `allowMcpAppAuth`. That is currently
-    // never set (see gitSandboxAccessForWorkflow): the github extension can't
-    // read the PEM in the sandbox and skips rather than falling back, so we keep
-    // the App key out entirely and every run uses just the minted `GITHUB_TOKEN`
-    // below — which also stops agents minting elevated tokens themselves. The
-    // branch is retained so per-profile App auth can be re-enabled if the
-    // sandbox-side PEM is ever materialized.
-    const ghEnv = {};
-    let mintedToken;
-    const access = opts?.githubAccess;
-    const allowAppAuth = access?.allowMcpAppAuth === true;
-    if (process.env.GITHUB_APP_ID && allowAppAuth) {
-        ghEnv.GITHUB_APP_ID = process.env.GITHUB_APP_ID;
-        if (process.env.GITHUB_APP_INSTALLATION_ID) {
-            ghEnv.GITHUB_APP_INSTALLATION_ID = process.env.GITHUB_APP_INSTALLATION_ID;
-        }
-        if (process.env.GITHUB_APP_PRIVATE_KEY_PATH) {
-            ghEnv.GITHUB_APP_PRIVATE_KEY_PATH = process.env.GITHUB_APP_PRIVATE_KEY_PATH;
-        }
-    }
-    else {
-        // Suppress for in-process runs that inherit our env. Empty strings
-        // override the inherited value via `applyEnv()`.
-        ghEnv.GITHUB_APP_ID = "";
-        ghEnv.GITHUB_APP_INSTALLATION_ID = "";
-        ghEnv.GITHUB_APP_PRIVATE_KEY_PATH = "";
-    }
-    if (process.env.GITHUB_APP_ID && access) {
-        try {
-            const permissions = GITHUB_PERMISSION_PROFILES[access.profile];
-            const repositories = access.repo ? [access.repo] : undefined;
-            console.log(`[executor] Minting git token: profile=${access.profile}, ` +
-                `repo=${access.repo || "(unscoped)"}, permissions=${permissions ? Object.keys(permissions).join(",") : "all"}`);
-            const { token } = await refreshGitAuth({
-                appId: process.env.GITHUB_APP_ID,
-                privateKeyPath: process.env.GITHUB_APP_PRIVATE_KEY_PATH || "",
-                installationId: process.env.GITHUB_APP_INSTALLATION_ID || "",
-                permissions,
-                repositories,
-            });
-            mintedToken = token;
-            ghEnv.GITHUB_TOKEN = token;
-            ghEnv.GIT_TOKEN = token;
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            console.warn(`[executor] Could not mint git token (repo=${access.repo || "none"}, ` +
-                `profile=${access.profile}): ${msg}`);
-        }
-    }
-    else if (process.env.GITHUB_TOKEN && access) {
-        // PAT fallback: no GitHub App, but a static Personal Access Token is set.
-        // Forward it directly — a PAT can't be per-run downscoped like an App
-        // installation token, so it carries whatever scopes GitHub granted. A
-        // read-only fine-grained PAT is the safe default; warn on repo-write
-        // profiles so an operator running build/pr-fix under a PAT knows the
-        // requested downscope isn't being applied.
-        if (GITHUB_PERMISSION_PROFILES[access.profile]?.contents === "write") {
-            console.warn(`[executor] Using a static GITHUB_TOKEN for a repo-write workflow ` +
-                `(profile=${access.profile}, repo=${access.repo || "none"}) — the PAT's ` +
-                `own scopes apply (no per-run downscoping).`);
-        }
-        mintedToken = process.env.GITHUB_TOKEN;
-        ghEnv.GITHUB_TOKEN = process.env.GITHUB_TOKEN;
-        ghEnv.GIT_TOKEN = process.env.GITHUB_TOKEN;
-    }
-    // Provider API keys. Forwarded in registry order — see `src/providers.ts`
-    // (the single source of truth for wizard-able providers). Every entry a
-    // user can pick in the setup wizard is reachable from the sandbox because
-    // the egress firewall list is also derived from the same registry's hosts.
-    for (const envKey of PROVIDER_ENV_KEYS) {
-        const v = process.env[envKey];
-        if (v)
-            ghEnv[envKey] = v;
-    }
-    // OAuth-backed providers (subscription logins: Codex / Claude Pro / Copilot).
-    //
-    // In-process backends (none/gondolin) run the model call host-side, so the
-    // orchestrator hands agentic-pi `authFile` = our credential store and Pi's
-    // AuthStorage resolves EVERY OAuth provider (Codex included) from it. Nothing
-    // to do here for those backends.
-    //
-    // Container backends (docker/smol) run the model call inside the guest, where
-    // that host path can't be read — so we inject the refreshed token via the env
-    // var pi reads in-guest (ANTHROPIC_OAUTH_TOKEN / COPILOT_GITHUB_TOKEN). Codex
-    // has no in-guest env route (chatgpt.com backend), so it can't authenticate
-    // there — warn rather than 401 mid-run, and point at a host-side backend.
-    const inProcessBackend = backend === "none" || backend === "gondolin";
-    const modelSpec = config.model || DEFAULT_MODEL;
-    const oauthId = oauthProviderIdForModel(modelSpec);
-    if (oauthId && !inProcessBackend) {
-        const oauthEnvVar = oauthEnvVarForProvider(oauthId);
-        if (!oauthEnvVar) {
-            console.warn(`[executor] Model '${modelSpec}' uses OAuth provider '${oauthId}', which has no ` +
-                `in-guest env route — the '${backend}' sandbox can't authenticate it. Use the ` +
-                `gondolin/none backend (host-side auth via the credential store) or an API-key provider.`);
-        }
-        else if (!ghEnv[oauthEnvVar] && !process.env[oauthEnvVar]) {
-            // Only mint from stored creds when an explicit token isn't already set.
-            try {
-                const res = await resolveOAuthApiKey(oauthId, undefined, stateDir);
-                if (res) {
-                    ghEnv[oauthEnvVar] = res.apiKey;
-                }
-                else {
-                    console.warn(`[executor] Model '${modelSpec}' needs an OAuth login for '${oauthId}' but none is ` +
-                        `stored. Run: lastlight oauth login ${oauthId}`);
-                }
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                console.warn(`[executor] OAuth token refresh failed for '${oauthId}': ${msg}`);
-            }
-        }
-    }
-    // Web-search provider keys. Forwarded only when the workflow opted into
-    // web search (scoped to explore today; see webSearchEnabledForWorkflow
-    // in workflows/runner.ts). agentic-pi auto-detects the provider from
-    // whichever key is present (Tavily > Exa > Brave by default).
-    if (config.webSearch) {
-        if (process.env.TAVILY_API_KEY)
-            ghEnv.TAVILY_API_KEY = process.env.TAVILY_API_KEY;
-        if (process.env.BRAVE_SEARCH_API_KEY)
-            ghEnv.BRAVE_SEARCH_API_KEY = process.env.BRAVE_SEARCH_API_KEY;
-        if (process.env.EXA_API_KEY)
-            ghEnv.EXA_API_KEY = process.env.EXA_API_KEY;
-    }
-    // OTEL config for the agent runtime itself. On docker the agent runs
-    // inside the container, so it reads this (the container env) and is
-    // pointed at the in-network collector — never the real backend or its
-    // auth headers. On gondolin/none the agent runs in the harness process
-    // and inherits the harness SDK; forwarding the host's OTEL_* here just
-    // re-affirms that config for any child processes.
-    if (config.otel?.enabled && config.otel.forwardToSandbox) {
-        Object.assign(ghEnv, backend === "docker" ? getDockerSandboxOtelEnv() : getOtelEnvForSandbox());
-    }
-    const prePopulate = access?.prePopulateBranch && mintedToken
-        ? {
-            owner: access.owner,
-            repo: access.repo,
-            branch: access.prePopulateBranch,
-            token: mintedToken,
-            runId: access.runId,
-            shallow: access.shallow,
-            recreateFromBase: access.recreateFromBase,
-        }
-        : undefined;
-    return { taskId, stateDir, backend, ghEnv, mintedToken, prePopulate };
-}
-export async function executeAgent(prompt, config, opts) {
-    const { taskId, stateDir, backend, ghEnv, prePopulate } = await prepareRun(config, opts);
-    const access = opts?.githubAccess;
-    const spanAttrs = safeSpanAttributes({
-        "agent.runtime": "agentic-pi",
-        "sandbox.backend": backend,
-        "task.id": taskId,
-        repo: access?.repo,
-        "github.profile": access?.profile,
-        model: config.model || DEFAULT_MODEL,
-        variant: config.variant,
-        "web_search.enabled": config.webSearch === true,
-        unrestricted_egress: config.unrestrictedEgress === true,
-        "workflow.name": config.telemetry?.workflowName,
-        "phase.name": config.telemetry?.phaseName,
-    });
-    const ctx = {
-        config,
-        taskId,
-        stateDir,
-        backend,
-        env: ghEnv,
-        prePopulate,
-        access,
-        onSessionId: opts?.onSessionId,
-        sandboxFactory: opts?.sandboxFactory,
-    };
-    return withSpan("lastlight.agent.execute", spanAttrs, () => runSandboxedAgent(prompt, ctx));
-}
-// ── Deterministic command path (type: bash / type: script) ───────────
-//
-// Runs a deterministic shell command (or inline script) inside the SAME
-// sandbox/workspace an agent phase would use — no LLM. The command's output is
-// mirrored to a Claude-SDK-style session jsonl via the AgenticShim (the same
-// shim agent phases use), so a bash/script phase shows up in the admin console
-// and `lastlight session log` exactly like an agent turn: the command renders
-// as a `bash` tool_use and its stdout/stderr as the tool_result.
-export async function executeCommand(spec, config, opts) {
-    const { taskId, stateDir, backend, ghEnv, prePopulate } = await prepareRun(config, opts);
-    const access = opts?.githubAccess;
-    const spanAttrs = safeSpanAttributes({
-        "agent.runtime": spec.kind,
-        "sandbox.backend": backend,
-        "task.id": taskId,
-        repo: access?.repo,
-        "github.profile": access?.profile,
-        unrestricted_egress: config.unrestrictedEgress === true,
-        "workflow.name": config.telemetry?.workflowName,
-        "phase.name": config.telemetry?.phaseName,
-    });
-    const ctx = {
-        config,
-        taskId,
-        stateDir,
-        backend,
-        env: ghEnv,
-        prePopulate,
-        access,
-        onSessionId: opts?.onSessionId,
-        sandboxFactory: opts?.sandboxFactory,
-    };
-    return withSpan("lastlight.command.execute", spanAttrs, () => runSandboxedCommand(spec, ctx, {
-        timeoutSeconds: opts?.timeoutSeconds,
-        sandboxEnv: opts?.sandboxEnv,
-        writeSession: opts?.writeSession,
-    }));
-}
-//# sourceMappingURL=agent-executor.js.map

package/dist/engine/agent-executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-executor.js","sourceRoot":"","sources":["../../src/engine/agent-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,0BAA0B,GAI3B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACpH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAGpB,MAAM,6BAA6B,CAAC;AACrC,0EAA0E;AAC1E,4BAA4B;AAC5B,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGnH;;;;;;;GAOG;AACH,KAAK,UAAU,UAAU,CACvB,MAAsB,EACtB,IAA2D;IAS3D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAmB,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC;IAE7D,qEAAqE;IACrE,qEAAqE;IACrE,wCAAwC;IACxC,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,sEAAsE;IACtE,yCAAyC;IACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,WAA+B,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,YAAY,EAAE,CAAC;QAC9C,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;YAC3C,KAAK,CAAC,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;YAC5C,KAAK,CAAC,2BAA2B,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC9E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mEAAmE;QACnE,iDAAiD;QACjD,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;QACzB,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,OAAO,IAAI;gBAC3D,QAAQ,MAAM,CAAC,IAAI,IAAI,YAAY,iBAAiB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAC/G,CAAC;YACF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;gBAChC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE;gBAC7D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE;gBAC5D,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;YACH,WAAW,GAAG,KAAK,CAAC;YACpB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAC3B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CACV,6CAA6C,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI;gBACtE,WAAW,MAAM,CAAC,OAAO,MAAM,GAAG,EAAE,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CACV,mEAAmE;gBACnE,YAAY,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,IAAI,IAAI,MAAM,gBAAgB;gBACzE,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,iCAAiC;IACjC,EAAE;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,gBAAgB,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,UAAU,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAChD,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,0BAA0B,OAAO,kBAAkB;gBAC/E,6BAA6B,OAAO,2CAA2C;gBAC/E,yFAAyF,CAC5F,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACnE,IAAI,GAAG,EAAE,CAAC;oBACR,KAAK,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,+BAA+B,OAAO,gBAAgB;wBAClF,sCAAsC,OAAO,EAAE,CAClD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,8CAA8C,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,8DAA8D;IAC9D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAClF,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAAE,KAAK,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3E,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,kDAAkD;IAClD,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,WAAW,GACf,MAAM,EAAE,iBAAiB,IAAI,WAAW;QACtC,CAAC,CAAC;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,iBAAiB;YAChC,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,MAAsB,EACtB,IAWC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAElC,MAAM,SAAS,GAAG,kBAAkB,CAAC;QACnC,eAAe,EAAE,YAAY;QAC7B,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,gBAAgB,EAAE,MAAM,EAAE,OAAO;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,oBAAoB,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;QAC/C,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACvD,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IAEH,MAAM,GAAG,GAAsB;QAC7B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,OAAO;QACP,GAAG,EAAE,KAAK;QACV,WAAW;QACX,MAAM;QACN,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC;IACF,OAAO,QAAQ,CAAC,yBAAyB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAiB,EACjB,MAAsB,EACtB,IAgBC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAElC,MAAM,SAAS,GAAG,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,gBAAgB,EAAE,MAAM,EAAE,OAAO;QACjC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACvD,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IAEH,MAAM,GAAG,GAAsB;QAC7B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,OAAO;QACP,GAAG,EAAE,KAAK;QACV,WAAW;QACX,MAAM;QACN,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC;IACF,OAAO,QAAQ,CAAC,2BAA2B,EAAE,SAAS,EAAE,GAAG,EAAE,CAC3D,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE;QAC7B,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,YAAY,EAAE,IAAI,EAAE,YAAY;KACjC,CAAC,CACH,CAAC;AACJ,CAAC"}